This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a7081ce6-d0a5-398a-90e4-2bf4df0d85e7.roa File: a7081ce6-d0a5-398a-90e4-2bf4df0d85e7.roa (raw, json) Hash identifier: V3nhao8hZTK13ZtkrhmrLWKD80Jl4F18PrckWtE/kRA= Subject key identifier: AA:3A:9E:F2:DD:18:FE:5E:6D:D3:0F:71:AC:BC:B5:31:B7:75:D2:81 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584BC96AF3007D5D99931082F700 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a7081ce6-d0a5-398a-90e4-2bf4df0d85e7.roa Signing time: Sat 08 Nov 2025 02:00:30 +0000 ROA not before: Sat 08 Nov 2025 02:00:30 +0000 ROA not after: Fri 06 Feb 2026 02:00:30 +0000 asID: 396085 IP address blocks: 72.249.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c9:6a:f3:00:7d:5d:99:93:10:82:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Nov 8 02:00:30 2025 GMT Not After : Feb 6 02:00:30 2026 GMT Subject: CN=ba530de0-3ba9-4046-af23-9680d2a34b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:27:04:3d:06:0b:33:61:65:71:49:2e:cf:f0: 2e:85:39:df:aa:55:62:3a:ee:0c:61:1c:90:37:e5: 27:ea:1d:59:16:5b:6d:11:37:62:2c:42:9d:68:a5: 56:a2:14:ba:5d:28:1e:ca:9f:3b:7c:f0:c2:e4:8e: 86:fd:ce:85:7f:a6:b0:50:25:ea:eb:d2:2e:1a:4a: 7a:5c:62:d2:cc:55:e8:6b:2e:74:b5:bb:07:82:f4: 76:bb:f5:8e:14:bd:54:90:70:6d:68:ea:13:07:55: 9b:2b:a3:e3:92:5d:4e:1a:55:fa:8e:85:57:69:a1: de:69:6b:93:75:18:ac:36:d9:d4:f2:da:9a:7d:5a: 4b:53:28:b8:a8:55:6c:1d:f2:66:cc:24:9c:af:d3: 4b:2c:aa:f2:13:2f:70:86:34:ff:d5:19:74:c3:8e: 55:ba:5b:5b:77:7e:0e:2a:66:45:72:ac:60:35:25: 84:1c:2b:c3:1c:50:be:06:bc:9e:c4:fb:f8:9a:69: c9:c9:46:63:fc:17:f9:32:50:7a:a3:1d:5f:05:49: 96:4e:66:41:f5:05:d2:47:98:ac:04:70:73:bf:5c: 24:57:89:9b:bf:93:35:e2:72:39:6a:85:bc:ab:0b: 2a:95:ef:9c:3d:b9:ff:37:bc:3f:d2:aa:29:17:09: 41:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3A:9E:F2:DD:18:FE:5E:6D:D3:0F:71:AC:BC:B5:31:B7:75:D2:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a7081ce6-d0a5-398a-90e4-2bf4df0d85e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 72.249.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:a8:80:dd:1f:b6:39:ec:36:5d:d4:2c:36:6b:46:fb:e6:dd: 75:62:4c:5d:c0:69:ea:3c:0f:db:83:03:f7:f4:35:56:a2:e8: 58:4b:50:e5:d5:bb:2f:b7:d9:f9:ec:55:ba:3a:2e:82:df:3c: ac:eb:0e:c6:ba:63:96:0b:85:85:61:c6:c2:b6:7e:8e:c5:94: 8b:81:83:a7:66:ba:8a:18:9d:7a:89:86:ce:91:b5:7e:72:fe: 8a:03:c2:95:90:c4:6a:61:86:63:d6:d7:ee:8c:24:b8:ad:eb: 76:c8:99:c4:e1:49:b2:00:55:c0:07:ab:67:9c:47:7a:9e:b6: 0a:10:11:1a:c4:3d:7f:ed:39:18:53:24:68:d6:5b:85:d5:7d: 7c:e2:05:14:38:89:f6:b1:4a:a2:51:5a:52:7e:e4:d5:85:e4: 96:a5:d7:30:b8:8f:f7:5a:b3:62:72:5b:a1:3a:8a:32:97:67: 0c:33:fc:f1:4d:fc:69:a4:e4:e3:91:5e:4d:84:e5:a1:bf:19: e6:b7:9c:68:37:4d:1b:19:db:fc:0a:5d:af:04:8d:0e:ef:95: 0e:b1:ec:16:14:92:79:fe:85:44:53:e7:74:03:6c:ee:cc:32: 0f:09:3b:f2:f1:28:e6:c2:2b:82:42:12:d3:72:0f:e5:a6:29: 25:98:d4:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvJavMAfV2ZkxCC9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MTEwODAyMDAzMFoXDTI2MDIwNjAyMDAzMFowLzEtMCsGA1UEAxMk YmE1MzBkZTAtM2JhOS00MDQ2LWFmMjMtOTY4MGQyYTM0YjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlycEPQYLM2FlcUkuz/AuhTnfqlViOu4MYRyQ N+Un6h1ZFlttETdiLEKdaKVWohS6XSgeyp87fPDC5I6G/c6Ff6awUCXq69IuGkp6 XGLSzFXoay50tbsHgvR2u/WOFL1UkHBtaOoTB1WbK6Pjkl1OGlX6joVXaaHeaWuT dRisNtnU8tqafVpLUyi4qFVsHfJmzCScr9NLLKryEy9whjT/1Rl0w45Vultbd34O KmZFcqxgNSWEHCvDHFC+BryexPv4mmnJyUZj/Bf5MlB6ox1fBUmWTmZB9QXSR5is BHBzv1wkV4mbv5M14nI5aoW8qwsqle+cPbn/N7w/0qopFwlB6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKo6nvLdGP5ebdMPcay8tTG3ddKBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYTcwODFjZTYtZDBhNS0z OThhLTkwZTQtMmJmNGRmMGQ4NWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPkiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiogN0ftjnsNl3ULDZrRvvm3XViTF3Aaeo8D9uDA/f0NVai6FhLUOXV uy+32fnsVbo6LoLfPKzrDsa6Y5YLhYVhxsK2fo7FlIuBg6dmuooYnXqJhs6RtX5y /ooDwpWQxGphhmPW1+6MJLit63bImcThSbIAVcAHq2ecR3qetgoQERrEPX/tORhT JGjWW4XVfXziBRQ4ifaxSqJRWlJ+5NWF5Jal1zC4j/das2JyW6E6ijKXZwwz/PFN /Gmk5OORXk2E5aG/Gea3nGg3TRsZ2/wKXa8EjQ7vlQ6x7BYUknn+hURT53QDbO7M Mg8JO/LxKObCK4JCEtNyD+WmKSWY1BA= -----END CERTIFICATE-----Generated at Sat Dec 6 21:40:27 2025 by rpki-client